In re Appln. of Frisch et al. 
Application No. 10/828,729 

Response to Final Office Action of October 1 1 , 2007 

Amendments to the Claims 

This listing of claims will replace all prior versions and listings of claims in the 
application. 

Claim 1 (currently amended): A method of electronically signing documents, comprising the 
steps of generating a token of delegation from a first signatory to a second signatory, and 
associating the delegation token with a document signed electronically by means of a 
cryptographic key of the second signatory, wherein the delegation token contains delegation 
data electronically signed for the first signatory, wherein the delegation data include an 
identifier of the second signatory, and wherein the delegation token is generated by a server 
in response to a request sent by the second signatory in connection with the signing of the 
document , wherein said request is accompanied by data depending on the document to be 
signed which are included in said delegation data to generate the delegation token . 

Claim 2 (original): A method according to claim 1, wherein the electronic signature 
performed by means of the cryptographic key of the second signatory is applied to the 
document accompanied by the delegation token. 

Claim 3 (original): A method according to claim 1, wherein the electronic signature 
performed by means of the cryptographic key of the second signatory is applied on the one 
hand to the document and on the other hand to authenticated attributes including the 
delegation token. 

Claim 4 (original): A method according to claim 1, wherein the delegation token is 
associated with the document signed by means of the cryptographic key of the second 
signatory without itself being signed by means of the cryptographic key of the second 
signatory. 

Claim 5 (original): A method according to claim 1, wherein the delegation data further 
include data describing a validity period of the delegation token. 
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Claim 6 (original): A method according to claim 1, wherein the delegation data further 
include description data of delegated powers conferred by the token. 

Claim 7 (original): A method according to claim 1, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 8 (original): A method according to claim 1, wherein a revocation server is 
provided for storing information on possible revocation of the delegation token by the first 
signatory. 

Claim 9 (original): A method according to claim 8, wherein the delegation data further 
include an access address to the revocation server. 

Claim 10 (original): A method according to claim 1, wherein the delegation data are signed 
electronically by means of a cryptographic key of the first signatory. 

Claim 1 1 (original): A method according to claim 1, wherein the delegation data further 
include an identifier of the first signatory and are signed electronically by means of a 
cryptographic key of a third party. 

Claim 12 (original): A method according to claim 1, wherein the delegation token is 
associated by the second signatory with the document signed electronically by means of a 
cryptographic key of the second signatory. 

Claim 13 (original): A method according to claim 1, wherein the delegation token is sent to 
the second signatory by the server. 

Claim 14 (original): A method according to claim 13, wherein the delegation token is 
associated with the signed document by an applet downloaded from the server to a station of 
the secondary signatory. 
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Claim 15 (original): A method according to claim 1, wherein the second signatory signs the 
document electronically and submits the signed document to the server, and wherein the 
server associates the signed document with the delegation token. 

Claim 16 (canceled). 

Claim 1 7 (currently amended): A method according to claim i€ I, wherein said data 
depending on the document to be signed comprise a code obtained by hashing the document. 

Claim 18 (currently amended): A computer device for electronic signature of 
documents by a second signatory delegated by a first signatory, comprising means for 
electronically signing a document by means of a cryptographic key of the second signatory, 
means for obtaining a token of delegation from the first signatory to the second signatory, and 
means for associating the delegation token with the signed document, wherein the delegation 
token comprises delegation data electronically signed for the first signatory, wherein the 
delegation data include an identifier of the second signatory, and wherein the means for 
obtaining the delegation token are adapted to send a request relating to the signing of the 
document to a server and to receive the token in response to said request , wherein said 
request is accompanied by data depending on the document to be signed . 

Claim 19 (original): A device according to claim 18, wherein the signature means are 
adapted to sign electronically the document accompanied by the delegation token, by means 
of the cryptographic key of the second signatory. 

Claim 20 (original): A device according to claim 18, wherein the signature means are 
adapted to sign electronically on the one hand the document and on the other hand 
authenticated attributes including the delegation token, by means of the cryptographic key of 
the second signatory. 

Claim 21 (original): A device according to claim 18, wherein the delegation data further 
include data describing a validity period of the delegation token. 
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Claim 22 (original): A device according to claim 18, wherein the delegation data further 
include data describing delegated powers conferred by the token. 

Claim 23 (original): A device according to claim 18, wherein the delegation data further 
include an access address to a revocation server storing information on possible revocation of 
the delegation token by the first signatory. 

Claim 24 (original): A device according to claim 18, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 25 (canceled). 

Claim 26 (currently amended): A delegation server for use in the electronic signing of 
documents by a second signatory delegated by a first signatory, comprising means for 
generating a token of delegation from the first signatory to the second signatory in response 
to a request sent by the second signatory in connection with the signing of a document, 
wherein the delegation token contains delegation data electronically signed for the first 
signatory, and wherein the delegation data include an identifier of the second signatory,, 
wherein said request is accompanied by data depending on the document to be signed which 
are included in said delegation data to generate the delegation token . 

Claim 27 (original): A server according to claim 26, further comprising means for sending 
the delegation token to the second signatory for association with the document signed 
electronically by means of a cryptographic key of the second signatory. 

Claim 28 (original): A server according to claim 27, further comprising means for 
uploading an applet to a station of the secondary signatory in order to control the association 
of the delegation token with the electronically signed document. 

Claim 29 (canceled). 
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Claim 30 (original): A server according to claim 26, wherein said data depending on the 
document to be signed comprise a code obtained by hashing the document. 

Claim 3 1 (original): A server according to claim 26, further comprising means for receiving 
the signed document from the second signatory, and means for associating the signed 
document with the delegation token. 

Claim 32 (original): A server according to claim 26, wherein the delegation data further 
include data describing a validity period of the delegation token. 

Claim 33 (original): A server according to claim 26, wherein the delegation data further 
include description data of delegated powers conferred by the token. 

Claim 34 (original): A server according to claim 26, wherein the delegation token further 
comprises timestamp information for the token. 

Claim 35 (original): A server according to claim 26, wherein the delegation data further 
include an access address to a revocation server provided for storing information on possible 
revocation of the delegation token by the first signatory. 

Claim 36 (original): A server according to claim 26, wherein the delegation data further 
include an identifier of the first signatory and are signed electronically by means of a 
cryptographic key of a third party. 

Claim 37 (currently amended): A computer program product to be installed in a 
computer device for electronic signature of documents by a second signatory delegated by a 
first signatory, comprising instructions for carrying out the following steps when the program 
is run by processing means of said device: 

- sending a request to a delegation server in connection with the signing of a 

document; 
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- receiving a token of delegation from a first signatory to a second signatory, 
generated by the server in response to said request, wherein the delegation token 
contains delegation data electronically signed for the first signatory, wherein the 
delegation data include an identifier of the second signator y, wherein said request is 
accompanied by data depending on the document to be signed which are included in 
said delegation data to generate the delegation token ; 

- electronically signing the document by means of a cryptographic key of the second 
signatory; and 

- associating the delegation token with the signed document. 

Claim 38 (original): A computer program product according to claim 37, wherein the 
electronic signature performed by means of the cryptographic key of the second signatory is 
applied to the document accompanied by the delegation token. 

Claim 39 (original): A computer program product according to claim 37, wherein the 
electronic signature performed by means of the cryptographic key of the second signatory is 
applied on the one hand to the document and on the other hand to authenticated attributes 
including the delegation token. 

Claim 40 (original): A computer program product according to claim 37, wherein the 
delegation token is associated with the document signed by means of the cryptographic key 
of the second signatory without itself being signed by means of the cryptographic key of the 
second signatory. 

Claim 41 (original): A computer program product according to claim 37, including an 
applet downloaded from the server to said computer device. 

Claim 42 (canceled). 
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Claim 43 (currently amended): A computer program product according to claim 42 37, 

wherein said data depending on the document to be signed comprise a code obtained by 
hashing the document. 

Claim 44 (currently amended): A computer program product to be installed in a 
delegation server involved in the electronic signature of documents by a second signatory 
delegated by a first signatory, comprising instructions for carrying out the following steps 
when the program is run by processing means of said server: 

- receiving a request from the second signatory in connection with the signing of a 
document; and 

- generating a token of delegation from a first signatory to a second signatory in 
response to said request, to be associated with the document signed electronically by 
means of a cryptographic key of the second signatory, 

wherein the delegation token contains delegation data electronically signed for the first 
signatory, wherein the delegation data include an identifier of the second signator y, wherein 
said request is accompanied by data depending on the document to be signed which are 
included in said delegation data to generate the delegation token . 

Claim 45 (original): A computer program product according to claim 44, further 
instructions means for sending the delegation token to the second signatory for association 
with the document signed electronically by means of the cryptographic key of the second 
signatory. 

Claim 46 (original): A computer program product according to claim 45, further comprising 
instructions for uploading an applet to a station of the secondary signatory in order to control 
the association of the delegation token with the electronically signed document. 

Claim 47 (canceled). 

Claim 48 (original): A computer program product according to claim 44, wherein said data 
depending on the document to be signed comprise a code obtained by hashing the document. 
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Claim 49 (original): A computer program product according to claim 44, further comprising 
instructions for receiving the signed document from the second signatory, and instructions for 
associating the signed document with the delegation token. 

Claim 50 (original): A computer program product according to claim 44, wherein the 
delegation data further include data describing a validity period of the delegation token. 

Claim 5 1 (original): A computer program product according to claim 44, wherein the 
delegation data further include description data of delegated powers conferred by the token. 

Claim 52 (original): A computer program product according to claim 44, wherein the 
delegation token further comprises timestamp information for the token. 

Claim 53 (original): A computer program product according to claim 44, wherein the 
delegation data further include an access address to a revocation server provided for storing 
information on possible revocation of the delegation token by the first signatory. 

Claim 54 (original): A computer program product according to claim 44, wherein the 
delegation data further include an identifier of the first signatory and are signed electronically 
by means of a cryptographic key of a third party. 
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